---
title: "Begin customer sign-in (redirects to the hosted sign-in with PKCE + state + nonce)"
method: GET
path: "/v1/auth/login"
tags: ["auth"]
---

# Begin customer sign-in (redirects to the hosted sign-in with PKCE + state + nonce)

`GET /v1/auth/login`

## Request

- Base URL: `https://api.wavehouse.cloud`
- URL: `https://api.wavehouse.cloud/v1/auth/login`
- Auth: none declared

## Query parameters

- `redirect` string: Post-login redirect target (must be on the allow-list; else the default console URL is used)
- `invitation_token` string

## Cookies

- `whc_last_org` string
- `whc_reauth` string

## Response `default`

Error

## Other responses

- `302`: Found
- `429`: Rate limited, per client IP, API key or org; a client IP is also refused on every route for a while after repeated authentication failures. A limited operation carries RateLimit-Policy and RateLimit on every response; wait Retry-After seconds before retrying.

---

[API](https://skmtc.dev/wavehouse/apis/wavehouse-cloud-api.md) · [All operations](https://skmtc.dev/wavehouse/apis/wavehouse-cloud-api/llms.txt) · [OpenAPI document](https://skmtc.dev/wavehouse/apis/wavehouse-cloud-api/revisions/adea029bf505?raw)
